1a179af180081cb7851c4d2964692228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a179af180081cb7851c4d2964692228_JaffaCakes118
Size

10KB
MD5

1a179af180081cb7851c4d2964692228
SHA1

53d5f569f7cb334ffa095c647d07bcc913248840
SHA256

f9359b14f951c60b5187198629f3aa0831eccf9dc1e3c0cecf7ef0697658e9d0
SHA512

f07a0e44cafcafbe3afe8bd314da8516a0101eeff160752d2b68c2884e0f5233b54403c8bd5621a5d838a6bdb28bd9377af355f95a03e27e058880893b41c1db
SSDEEP

96:rbOpqHUdzbHUKreC4c7n7DiidAOWSV31Qw7B7ud/5I/Bns0wZ4Zm8hGg3Y1oTgTr:A50Kwc77DizOWy3XB78usRio1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a179af180081cb7851c4d2964692228_JaffaCakes118

Files

1a179af180081cb7851c4d2964692228_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b851bf3d9fc74defb7fb7f6c60f09cee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
WaitForSingleObject
GetTickCount
Sleep
LeaveCriticalSection
GetSystemDirectoryA
EnterCriticalSection
LoadLibraryA
GetModuleHandleA
CloseHandle
GetTempPathA
CreateThread

user32

CopyIcon
wsprintfA
LoadCursorA

Exports

Exports

Execute

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 585B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ